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O l' Abstract 

In classical problem solving, there is of course correlation between the 
selection of the problem on the part of Bob (the problem setter) and that 
^ ■ of the solution on the part of Alice (the problem solver). In quantum 

p^H' problem solving, this correlation becomes quantum. This means that 

Alice contributes to selecting 50% of the information that specifies the 

problem. As the solution is a function of the problem, this gives to Alice 

'^ ' advanced knowledge of 50% of the information that specifies the solution. 

Both the quadratic and exponential speed ups are explained by the fact 
that quantum algorithms start from this advanced knowledge. 






> 

en 



in 

o 
o 



c^ 



1 Outline of the argument 



Quantum algorithms require fewer computation steps than their classical coun- 
terparts. The reason for this quantum speed up is not well understood. For 
example, recently Gross et al. [1] asserted that the exact reason for it has never 
been pinpointed. The key to the present explanation of the speed up is the 
j^ ■ quantum correlation existing between the selection of the problem on the part 

H I of Bob (the problem setter) and that of the solution on the part of Alice (the 

problem solver). Because of it, all is like Alice contributed to selecting 50% of 
the information that specifies the problem. Since the solution is a function of 
the problem, this gives to Alice the advanced knowledge of 50% of the informa- 
tion that specifies the solution. The speed up is explained by the fact that Alice 
starts from this advanced knowledge. 

The quantum correlation we are dealing with appears at the level of the 
whole quantum experiment, from the measurement required to put the quantum 
system in a known state, necessary to prepare the problem, to the measurement 
required to extract the solution - see also [2,3,4]. 

We focus on Grover's [5] quantum search algorithm. Bob selects a value of 
b e {0, 1}", Alice should find it by computing the Kronecker function (5(b,a) 



for various values of a G {0, 1}". We consider the simplest instance n — 2. With 
a classical algorithm, Alice should plan 3 computations of 5 (b, a) to be certain 
of finding the solution, with Grover's algorithm, 1 computation. There is a 
quantum speed up. 

In the original Grover's algorithm, a register A, under the control of Alice, 
contains the value of a; the value of b is hard-wired inside the black box that, 
given in input a value of a, computes S (b, a). To highlight quantum correlation, 
we add a register B, under the control of Bob, containing the value of b. We 
call A the content of register A, B that of register B - A and B are commuting 
observables. 

Initially, register _B is in a maximally mixed state. As usual, Alice prepares 
register A m a, uniform, coherent superposition of all the possible values of a. 
The initial state of the two registers is thus: 



IV') = ^ (e*^° 100)^ + e'^^ 101)^ + e^^= 110)^ + e'^^ |n)^) 

(|00)^ + |01)^ + |10)^ + |11)^), (1) 

where the ipi are independent random phases, each with uniform distribution in 
[0, 27r]. We use the random phase representation of a mixed state, instead of the 
density operator, to keep the usual state vector representation of the quantum 
algorithm. The density operator is simply the average over all the ipi of the 
product of the ket by the bra: (1-0) {ip\)\^^.- The two bits von Neumann entropy 
of the state of B - and of the overall quantum state ([T]) - corresponds to the 
complete indeterminacy of the value of b. 

In order to prepare register B in the desired value of b, say b = 00, Bob 
measures B in state ([Ij, thus randomly selecting a value of b, say b = 01. This 
projects state ([T|) on: 

Pc IV') = \ |01)b (|00)^ + |01)^ + |10)^ + |ll)^) , (2) 

here and in the following we denote projection operators by the letter P. The 
entropy of the quantum state goes to zero with the determination of the value 
of b. Then he applies to register B a permutation of the values of b - a unitary 
transformation Ub - that changes the randomly selected value into the desired 
one: 

UbPc I^) = \ 100)5 (|00>^ + |01>^ + |10>^ + |11)^) . (3) 

The unitary part of the quantum algorithm. Us a, sends state ([3]) into 

UbaUbPc \^) = |00)b |00)^ . (4) 

Register A contains the solution, namely the value of b chosen by Bob. Alice 
acquires the solution by measuring A. Of course there is a one to one correlation 
between the value of b chosen by Bob and the solution found by Alice. Up to 
the permutation introduced by Ub , this corresponds to the quantum correlation 



between the outcome of measuring B in ((T)) and that of measuring A in Q. From 
the standpoint of quantum correlation, which concerns repetitions of the same 
quantum experiment, Ub should be considered fixed. The fact that Bob chooses 
the permutation Ub to obtain the desired value of b belongs to a different film. 
With Ub fixed, all is like Bob's measurement of B randomly selected the 
value b — 00, which becomes in fact a fixed permutation of the randomly 
selected value b = 01; in this special sense, we will speak of the random selection 
also of the value of b chosen by Bob. Moreover, Bob's measurement can be 
performed indifferently at the beginning or the end of the algorithm. We show 
the quantum development in the case that this measurement is performed at 
the end: 

1^) = i (e'^° 100)^ + e*'^^ 101)^ + e'^^ 110)^ + e^^^ |n)^) 

(|00)^ + |01)^ + |10)^ + |11>J (5) 

Ub m = W (6) 

UbaUb \yj) = I (e'^° 100)5 |00)^ + e'^^ {01)^ |01)^ + e'^^ llO)^ |10)^ + e'^^ lll)^ |11)^) , 

(7) 

P^C/baC/b|V') = |00)b|00)^; (8) 

of course Ub changes the maximally mixed state of register B into itself; for 
reasons that will become clear, we have assumed that the final measurement 
of A on the part of Alice still randomly projects on b = 00. We can see why 
Bob's measurement can be deferred at the end: the projection of (O on ([H]), 
back evolved by U^b^ba^ becomes the projection of ([T]) on ([2|). 

Thinking that all measurements are performed in the maximally entangled 
state ([7]) makes it more clear that the value of b is randomly selected by either 
Bob's or Alice's measurement. Either measurement projects state ([7|) on the 
solution eigenstate dH), where both registers contain the randomly selected value 
of b; correspondingly, the 2 bit entropy of the quantum state goes to zero. 

Unlike measurements, projections are not localized in time. They can be 
back evolved by the inverse of the time forward unitary evolution. Thus, there 
is no reason to ascribe the projection on the solution eigenstate, or the corre- 
sponding reduction of entropy and random selection of the value of b, to one 
measurement rather than the other. Because of the symmetry between the two 
measurements, we ascribe the determination of 50% of the bits of b to the 
measurement performed by Alice, the other 50% to that performed by Bob. 

Halving the projection on the solution can be done in many ways. In section 
2.3 we will symmetrize for all the possible ways, here we exemplify one way. We 
break down A into content of first qubit Aq and content of second qubit Ai; 
we call ao (ai) the eigenvalue obtained by measuring Aq (Ai). We define in a 
similar way Bq, Bi, bo, and 61. We ascribe to Alice the measurement of Aq, 
which selects oq = 60 = 0, to Bob the measurement of Bi, which selects ai = 
61 — 0. Together, the two corresponding projections project on the solution; 
individually, they halve the projection on the solution. 



Summing up, half of the bits of b are randomly selected by Bob, the other 
half by Alice. We show that this means that Alice knows in advance 50% of 
the bits of b. It suffices to note that states ([5]) through ([5]) are the original 
quantum algorithm - namely states ([IJ through ^ - with the quantum state 
relativized to the observer Alice in the sense of relational quantum mechanics 
[6]. By definition, initially Alice does not know the content of register B. To her, 
register i? is in a maximally mixed state even if Bob has already measured B. 
The 2 bit entropy of this state - and of the overall quantum state ^ - represents 
Alice's ignorance of the value of b. When Alice measures A at the end of the 
algorithm, the quantum state ([7]) is projected on the solution eigenstate (|5]). 
This projection is random to Alice, it is actually on the value of b chosen by 
Bob. The entropy of the quantum state goes to zero and Alice acquires full 
knowledge of the value of b. Thus, the entropy of the relativized quantum 
state gauges Alice's ignorance of the value of b throughout the execution of the 
algorithm. 

As we have said before, when Alice measures A at the end of the algorithm, 
half of the projection on the solution eigenstate is Alice's contribution to the 
random selection of the value of b. We back evolve to the beginning of the 
quantum algorithm (to immediately after the permutation Ub) this halved pro- 
jection, for example the projection associated with measuring Aq and obtaining 
ao = bo — - we should apply Ug^ to the projection. This projects the initial 
state ^ on 

^ (e'^o 100)^ + e»^^ 101)^) (|00)^ + |01>^ + |10)^ + |11)^) , (9) 

halving the entropy of the state of register B. This means that Alice, before 
starting the algorithm and "after" this back evolved half projection, knows that 
6o = 0, namely one of the two bits of the solution she will read in the future in 
register A. 

We are at the level of elementary logical operations, where knowing means 
doing. Alice knows of the advanced information by acting like she knew it, 
namely by using it to identify classically the missing bit (the value of bi ) with 
a single computation of (5(b,a). Correspondingly, as we showed in [3,4], the 
quantum algorithm is the superposition of all the possible ways of taking one 
bit of information about the solution and, given the advanced knowledge of this 
bit, classically identifying the missing bit with a single computation of S (b, a). 
This explains the speed up from 3 to 1 computation. 

We note that the entangled state ([7]) is the outcome of the unitary part of 
any quantum algorithm that starts with a maximally mixed state of register 
B and solves the data base search problem, with or without a quantum speed 
up. In fact the quantum algorithm can do either without or with the advanced 
knowledge. In the former case, it is isomorphic with a classical algorithm that 
starts from the usual initial state and yields no speed up. In the latter, it is 
isomorphic with a classical algorithm that starts from the initial state "after" 
the back evolved half projection on the solution - thus with advanced knowledge 
of 50% of the bits of the solution. 



The above explanation of the speed up generahzes to n > 2 and to the very 
diverse quantum algorithms that yield an exponential speed-up. In all the cases 
examined, the quantum algorithm requires the number of function evaluations 
(computations of S (b, a) in Grover's case) of a classical algorithm that knows 
in advance 50% of the information about the solution. Already in former work 
[3], we called this the 50% rule of the quantum algorithms. 

The 50% rule has a practical interest, it allows to characterize the problems 
solvable with a quantum speed up in an entirely computer science framework 
with no physics involved - an important simplification. It should also allow to 
identify new quantum speed ups. 

Section 2 highlights the mechanism of the speed up in the case of Grover's 
algorithm. In section 3, we check that the 50% rule holds for a class of quantum 
algorithms that yield an exponential speed-up. In section 4, we develop a new 
quantum speed up out of the 50% rule. In section 5 we draw the conclusions. 

2 The mechanism of the quantum speed-up in 
Grover's algorithm 

We develop in detail the line of thinking provided in the former section, first for 
n = 2 then for n > 2. 

2.1 Extended representation of Grover's algorithm 

We relativize to Alice the quantum state of the original Grover's algorithm. 
With n = 2, registers B and A are two-qubits each. A one-qubit register V is 
meant to contain the result of the computation of (5 (b, a), modulo 2 added to 
its initial content for logical reversibility. Let us assume that Bob chose b = 00, 
the initial state of the three registers is anyhow: 

l*> = ^ (e'^" |00)s + e'^^^ 101)^ + e'^^ |10)s + ^^^ lll)^) (10) 

(|00)^ + |01)^ + |10)^ + |11)^) (|0)^ - |1)^) . 

The two bit entropy of the state of register B represents Alice's initial ignorance 
of Bob's choice. 

The computation of 5 (b, a) is performed in quantum parallelism on each 
term of the superposition. For example, the input e"^^ |01)b |01)^ |0)y means 
that the input of the computation of 5 (b, a) is b = 01, a = 01 and that the ini- 
tial content of register V is 0. The computation yields 5 (01, 01) ~ 1 that, mod- 
ulo 2 added to the initial content of V, yields the output e"^i|01)^|01)^|l)y 
{B and A keep the memory of the input for logical reversibility). Similarly, 
the input - e*"^! lOl)^ |01)^ \l)y goes into the output - e*"^! lOl)^ |01)^ |0)y. 
More in general, the input e*'^'' |b)^ |a)^ (|0)y — |l)y) goes into the output 
— e^'^'°\h)g\a)ji^{\Q)y~\l)y) if a = b, remains unaltered otherwise. In the 
overall, a single computation of 5 (b, a) sends state (fTU|) into: 



Usm^ 



4%/2 



e^'^" |00)b (- |00)^ 
e'^^i 101)^ (|00)^ - 



|01)^ + |10)^ + |11) 



e»^^ |10)^ (|00)^ + |01)^ - |10)^ + |11)^) + 
e*'^3|n)^(|00)^ + |01)^ + |10)^-|ll)^) 



(|0)v.-|l)v), 



(11) 



a maximally entangled state where four orthogonal states of register B, each 
containing a single value of b, are correlated with four orthogonal states of 
register A. To transform entanglement into correlation between measurement 
outcomes, we apply to register A the unitary transformation Ua such that: 



UAUsm = 



2V2 



(e'^« 100)5 |00)^ + c^^^ 101)5 |01)^ + e^^^ llO)^ |1G)^ + e^^^ lll)^ |11)^) 



(12) 



(|0)v-|l)v). 



We incidentally note that eliminating register V, like we did in section 1, does 
not alter the unitary character of the transformations. Measuring A in state 
(fT2|) . projects it on the solution eigenstate: 
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100)5 |00)^(|0)^-|1)^). 



(13) 



yielding the eigenvalue a = 00, namely the solution of the problem. Alice 
acquires full knowledge of the value of b chosen by Bob and the entropy of 
the quantum state becomes zero. This entropy gauges Alice's knowledge of the 
value of b throughout the execution of the algorithm. 



2.2 Back evolving 50% of the projection on the solution 

We show the consequence of ascribing 50% of the determination of the value 
of b to a partial measurement performed by Alico We adopt the example of 
section 1; we assume that the value of b chosen by Bob is b = 00 and that the 
partial measurement is that oi Aq. This selects the eigenvalue oq — 0, projecting 
(fT2l) on: 



a«VO 



100)5 loo). 



P«V1 



01)5101) J (|0), 



(14) 



We back evolve this projection to the beginning of the quantum algorithm, by 
applying to state (I14p the inverse of the unitary part of the algorithm, namely 
UlUj^. This projects the initial state of the algorithm, (|10p . on: 



^We should keep in mind that AHcc's measurement contributes to the random selection of 
a value of b, then transformed into the value chosen by Bob by the unitary transformation 
Ub ■ Since this latter should be considered fixed from the standpoint of quantum correlation, 
we can say that Alice contributes to Bob's choice. 



\ (e^^« 100)5 + e'^^ |01>b) (|00)^ + |01>^ + |10>^ + |11>^) (|0)^ - |1)^) . (15) 

That the state of register B should have the form it has in ([T5|). can be 
seen more directly as follows. We note that the unitary part of the quantum al- 
gorithm is the identity on the reduced density operator of register B that, in the 
random phase representation, is PS = \ (e^'^" \QQ)g+e"^^ 101)^ + 6*'^^ |10)b +6*'^^ |11)b) 
in both ((TUI and (fT^ . By measuring ^o in state p^ . Ahce projects pB on 
1 ^e^*^" |00)^ + e'*^! |01)^). This projection goes back unaltered to the begin- 
ning of the algorithm. 

State (fT5|) says that, "after" back evolved projection, Alice knows in advance 
that the value of b is either b = 00 or b = 01, namely that 60 = 0. Corre- 
spondingly, the entropy representing Alice's initial ignorance of the solution has 
decreased from two to one bit. How Alice utilizes this gain in information to 
achieve a speed up is explained in the next section. 

2.3 Utilizing the back evolved half projections 

By measuring A Alice projects state ([T2|) on the solution eigenstate. Let us go 
exhaustively through all the possible ways of halving this projection on the so- 
lution. Until now we have considered the binary observable Aq , whose measure- 
ment tells whether b G {00,01} or b G {10,11}, and Ai, whose measurement 
tells whether b G {00, 10} or b G {01, 11}. There is a third binary observable, 
say A+, whose measurement tells whether b G {00, 11} or b G {01, 10}. Mea- 
suring any pair of these three observables projects the output state (fT2|) on the 
solution. Measuring any single observable halves the projection on the solution. 

In the overall, there are 6 halved projections, on: {00, 01}, {10, 11}, ..., and 
{01, 10} - all the ways of taking a pair of elements out of four. Each halved 
projection (actually, on an incoherent superposition of two values of b) goes 
back unaltered to the beginning of the quantum algorithm, where it halves the 
entropy of Alice's state of knowledge of the value of b, originating 8 classical 
computation histories, as follows. 

Let us start with the projection on b G {00, 01}. In other words, Alice knows 
in advance that b G {00,01}. To identify the missing bit, she should compute 
5 (b, a) for either a = 00 or a = 01. We assume that she does it for a = 00 ~ we 
are pinpointing one of the possible combinations. If the outcome of the compu- 
tation is (S = 1, this means that b = 00. This originates two classical compu- 
tation histories (represented as sequences of sharp quantum states) , depending 
on the initial state of register V. History # 1: initial state e^'^° |00)^ |00)^ |0)y, 
state after the computation e*"^" lOO)^ |00)^ |l)y- History # 2: initial state 
e"^o 100)5 |00)a |l)y' state after the computation e^a \qq) ^ |oo)^ \Q)y. If the 
outcome of the computation is 5 = 0, this means that b = 01. This orig- 
inates other two histories. History # 3: initial state e**^! lOl)^ 1 00)^ |0)y, 
state after the computation e*'''^ |01)b |00)^ |0)y. History # 4: initial state 



e*"^! 101)5 |00)^ |1)^, state after the computation e'^P^ \Ql)g |00)^ \l)y. If she 
computes (5(b,a) for a = 01 instead, this originates other 4 histories. Etc. 

If we sum together all the different histories (some histories are originated 
more than once), each with a suitable phase, and normalize, we obtain the 
function evaluation stage of the quantum algorithm, namely the transformation 
of state UnD into PT|) . 

This answers the question of how Alice knows of the advanced information 
- the information conveyed back by the back evolved half projections on the 
solution. We are at the level of elementary logical operations, where "knowing" 
means " doing" . Alice knows of the advanced information by acting like she knew 
it, namely by computing on the basis of it the missing information. It should 
be noted that Alice could also ignore (do without) the advanced information, 
which simply means a quantum algorithm with no speed up, isomorphic with 
a classical algorithm that starts from complete ignorance of the value of b. An 
algorithm that yields a speed up is isomorphic with a classical algorithm that 
starts from the back evolved half projections on the solution. 

The 50% rule only says that the quantum algorithm can be broken down into 
a superposition of classical computation histories that start from the advanced 
information, the history phases and the rotation of the basis of register A (i. e. 
Ua) after the computation of 5 (b, a) are what is needed for reconstructing the 
quantum algorithm. However, in Ref. [3,4], we have shown that the quantum 
algorithm can be synthesized out of the advanced information classical algo- 
rithm (out of the classical computation histories in quantum notation) through 
an optimization procedure. We should choose history phases and rotation of 
the basis of A in such a way that they maximize: (i) entanglement between 
registers A and B after the computation of 5 (b, a) or, in equivalent terms, (ii) 
the information about the solution readable in A at the end of the algorithm. 

2.4 Quantum search for n > 2 

Registers B and A are n-qubit each. Register V is one-qubit. Given the ad- 
vanced knowledge of n/2 of the bits of the value of b selected by Bob, in order 
to compute the missing n/2 bits, Alice should compute 5 (b, a) for all the values 
of a in quantum superposition and apply to register A the appropriate unitary 
transformation Ua an O (2"' ^) times; each time Ua maximizes the entanglement 
between registers B and A. Eventually we obtain (approximately): 




2(n-M)/2 I A^ " I-/BI-/A I VI-/V |l)y)- (16) 



Measuring either A or i?, or both, projects (|T6|) on the solution eigenstate. 
According to the rationale of the previous sections, we should halve the fi- 
nal projection on the solution in all possible ways; for example, by measuring 
Aq, ..., An_i. Let T be the information acquired by reading the solution at 
the end of the algorithm. Evidently, the considerations of the previous sections 
apply also here: back evolving a half projection to the beginning of the quantum 



algorithm, makes available at the input of the computation the corresponding 
50% of I. 

The fact that, for large n, the optimal number of times is f 2"/^, not 2"/^, 
does not imply that Grover's algorithm outperforms the 50% rule. In fact this 
optimal number is associated with a non-zero probability - O (1/2") - that the 
algorithm delivers a wrong solution. One should look for the possible cases 
where Grover's algorithm yields the solution with certainty, like in the case 
n = 2. 

3 Checking the 50% rule on other quantum al- 
gorithms 

Until now we have discussed the 50% rule on Grover's algorithm. It is therefore 
important to check that the rule holds for the very diverse quantum algorithms 
that yield an exponential speed-up. In many of these algorithms, there is a 
set of functions /b : {0, 1}" — )■ {0, l}"* known to both Alice and Bob. Bob 
selects a value of b and Alice should find a character of the function /b by 
computing /b (a) for various values of a. Since the problems addressed by such 
algorithms are structured, identifying the advanced information and sharing 
out the projection on the solution between Alice and Bob requires some care. 
With respect to the similar section of Ref. [4] , the present one provides various 
clarifications. 

3.1 Deutsch&Jozsa's algorithm 

In Deutsch&Jozsa's [7] algorithm, the set of functions known to both Bob and 
Alice is all the constant and "balanced" functions (with an even number of 
zeroes and ones) /b : {0, 1}" — )■ {0, 1}. Table (fT7| gives this set for n = 2. The 
string b = 6o, ^1, •■•: &2"-i is both the suffix and the table of the function - the 
sequence of function values for increasing values of the argument. 



a 


/oooo (a) 


/nil (a) 


/oou (a) 


/iioo (a) 


/oioi (a) 


/loio (a) 


/oiio (a) 


/looi (a) 


00 





1 





1 





1 





1 


01 





1 





1 


1 





1 





10 
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1 
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1 





11 
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1 





1 








1 



(17) 
Alice should find whether the function selected by Bob is balanced or con- 
stant, by computing /b (a) = /(b,a). In the classical case this requires, in 
the worst case, a number of computations of /(b,a) exponential in n; in the 
quantum case one computation. 

The initial state of the algorithm relativized to Alice is: 



^ (po e'^° 10000)5 + Pi e^^^ Illll)i3 + P2 e^^= lOOll)^ + pg e'^^ IllOO)^ + ...) 

(18) 

(|00)^ + |01)^ + |10)^ + |11)^) (|0)^ - |1)^) . 

The coefRcients pi > 0, such that J^Pl — 1' account for a non flat probabiUty 
distribution of Bob's selection. Things wiU be simpler if we assume that the 
Pi are the same for dual values of b, like 0000 and 1111. Modulo 2 adding the 
result of the computation of / (b, a) to the content of V and performing the 
Hadamard transform on register A yields the entangled state: 

-^ [{po e'^° 10000)3 - Pi e^^^ Illll)s) |00)^ + {P2 ^^^ lOOll)^ - pa e'^^^ IllOO)^) |10), 



(19) 



(io)v.-ii; 



V) 



Measuring 13 and A in (IT^l) yields Bob's selection of a value of b and the solution 
found by Alice: all zeroes if the function is constant, not so if it is balanced. 

We check that the quantum algorithm requires the number of function eval- 
uations of a classical algorithm that knows in advance 50% of I - we call I the 
information acquired by reading the solution at the end of the algorithm. Since 
the solution is a function of b, we can define the advanced information as any 
50% of the information about the solution contained in b, namely in the table 
of /b (a). If /b (a) is constant, for reasons of symmetry, the advanced informa- 
tion is any 50% of the table of the function - see table (ITTI) . If the function is 
balanced, still for reasons of symmetry, it is any 50% of the table that does not 
contain different values of the function - for each balanced function there are 
two such half tables. In fact, the half tables that contain different values of the 
function already tell that the function is balanced and thus contain 100% of I. 
For the good half tables, that do not contain different values of the function, the 
solution (whether the function is constant or balanced) is always identified by 
computing /b (a) for only one value of a (any one) outside the half table. Thus, 
both the quantum algorithm and the advanced information classical algorithm 
require just one function evaluation. 

We should note that the present definition of advanced information: 

1. Could be applied as well to Grover's algorithm, where it becomes: any 
50% of the table of 5 (b, a) (for a given value of b) that does not contain 
the value 5 (b, a) = 1. All the results of section 2 would remain unaltered. 

2. Identifies a back evolved half projection on the solution. In fact - up to the 
sign of the random phase factors that is irrelevant - the reduced density 
operator of register B in the random phase representation is: 

PB =PoC*'^° |0000)5+pic*'^i |llll)5+P2e''^^ |0011)5+p3e"^^' 11100)^+... 

(20) 



10 



throughout the unitary part of the quantum algorithm. We assume that 
the advanced information (a good half table) is / (b, 00) = and / (b, 01) = 
0. This means that the function selected by Bob is either /oooo (a) or 
/ooii (a) - see table ([T7)l . This corresponds to projecting pB on p'^ = 
[po e"^" |0000)^ + p2 e*^^ |0011)^), up to normalization; this outcome goes 
back unaltered to the beginning of the quantum algorithm, where it be- 
comes Alice's advanced knowledge of the solution. We should note that 
Alice, by measuring Ai in state (|19p and finding ai = 0, projects ps not 
on p'g but on: 

PB = Po e"^« |0000)s + Pi e''^' lllll)^ + p2 e''^'- lOOll)^ + ps c'^^ IllOO)^ , 

(21) 
up to normalization. To project (I2ip on p'^, Bob should measure a single 

Bi, e. g. Bq, thus finding in present assumptions bo = 0. This latter 
projection, although performed by Bob, can be added to Alice's advanced 
knowledge of the solution. In fact it selects between dual values of b, which 
does not disclose to Alice any information about the solution - does not 
affect the entropy of the reduced density operator of register A in state 
dTH). 



This time, sharing out the projection on the solution between Alice and Bob 
would be more complex, because of the asymmetry between the two actions. 
However, we can bypass this difficulty. It suffices to note that, with all the 
Pi > 0, state P^ is certainly entangled. Thus, in present criteria, there is 
anyhow a non zero contribution to the determination of the value of b on the 
part of both Alice and Bob. This is enough to see that the advanced information 
available to Alice cannot exceed 50% of I. In fact, increasing it over 50% would 
mean increasing any good half table by one row, which would project the output 
state (fT9|) on the solution, leaving to Bob nothing to project. 

Summing up, we have ascertained that Alice's advanced information is back 
evolved projection and that it is (and cannot exceed) 50% of X. 

Now we go to the history superposition picture. Let us assume that the 
advanced information is /(b,00) = and /(b, 01) — 0. Alice can find the 
value of b (thus the character of the function), by performing function evalu- 
ation for either a = 10 or a = 11. We assume that she does it for a = 10. 
If the result of the computation is 0, this means that b = 0000. This origi- 
nates two classical computation histories in quantum notation: =ff 1: initial state 
poe'v° |0000)b |10)^ |0)y, state after the computation po e''^" lOOOO)^ |10)^|0)y; 
#2: initial state Po e*"^" lOOOO)^ |10)^ |l)y, state after the computation po e*"^" lOOOO)^ |10)^ |l)y. 
If the result of the computation is 1, this means that b = 0011. This originates 
two histories: # 3: initial state p2e*'^^ |0011)^ \^^)a \^)v' state after the com- 
putation p2e'^=^ 10011)5 |10)^ |1)^; # 4: initial state p2 e''^^ 10011)^3 |10)^ |1)^, 
state after the computation p2 e*'''^ lOOll)^ |10)a \^)v ^^ ^^® performs function 
evaluation for a = 11 instead, this originates other 4 histories, etc. If we sum 
together all the different histories, each with a suitable phase, and normalize, 
we obtain the function evaluation stage of the quantum algorithm. 
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To obtain the quantum algorithm, we should choose history phases and the 
final unitary transformation applied to register A in such a way that the infor- 
mation about the solution readable in that register at the end of the algorithm 
is maximized. 

3.2 Simon's and the hidden subgroup algorithms 

In Simon's [8] algorithm, the set of functions is all the /b : {0, 1}" — ?> {0, 1}"~ 
such that /b (a) = /b (c) if and only if a = c or a = c © h'^'') ; © denotes 



.(b) 



bitwise modulo 2 addition; the bit string h(b)= Hq , /i^ \ ..., /i^j'^^, depending 
on b and belonging to {0, 1}" excluded the all zeroes string, is a sort of period 
of the function. Table (|22p gives the set of functions for n = 2. The bit string 
b is both the sufRx and the table of the function. Since h'^) © h'^) = 0, each 
value of the function appears exactly twice in the table, thus 50% of the rows 
plus one surely identify h'^). 





h(ooii) = 01 


h(iioo) ^ 01 


h(uiui) = 10 


h(ioio) ^ 10 


h(oiio) ^ 11 


h(inui) ^ 11 


a 


/ooii (a) 


/iioo (a) 


/oioi (a) 


/loio (a) 


/ouo (a) 


/looi (a) 


00 





1 





1 





1 


01 





1 


1 





1 





10 


1 








1 


1 





11 


1 





1 








1 



(22) 
Bob selects a value of b. Alice's problem is finding the value of h*-''-', "hid- 
den" in /b(a), by computing /b (a) = / (b, a) for different values of a. In 
present knowledge, a classical algorithm requires a number of computations of 
/ (b, a) exponential in n. The quantum algorithm solves the hard part of this 
problem, namely finding a string s, orthogonajj to h'-b) ^ with one computation 
of / (b, a). There are 2"^^ such strings. Running the quantum algorithm yields 
one of these strings at random (see further below) . The quantum algorithm is 
iterated until finding n— 1 different strings. This allows to find h^^) by solving a 
system of modulo 2 linear equations. Register B is now 2" {n — l)-qubit, given 
that b is the sequence of 2" fields each on n — 1 bits. 

The initial state of the algorithm relativized to Alice, with register V pre- 
pared in the all zeroes string (just one zero for n ~ 2), is: 



- (po e'""" |0011)b + pi e^'^i |1100)b + p2 e^^^ lOlOl)^ + pa e'^^ IIOIO)^ + ...) 



(23) 



(|00)^ + |01)^ + |10)^ + |11)^)|0), 



Computing / (b, a) , which changes the content of V from zero to the outcome of 
the computation, and performing the Hadamard transform on register A yields: 



The modulo 2 addition of the bits of the bitwise product of the two strings should be zero. 
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1 r (po e^^° 10011)5 + Pi e'^^ |1100)b) [(|00)^ + |10)^) |0)^ + (|00)^ - |10)^) |1)^] 

2 1 +(P2 e^'^^ 10101)5 + P3 e^^^ 11010)5) [(|00)^ + |01)^) |0)^, + (|00)^ - |01)^) |1)^] + .. 

(24) 
where, for each value of b, register A (no matter the content of V) hosts even 
weighted superpositions of the 2"^"'^ strings s^ orthogonal to h*^'''. By mea- 
suring A and B in state (l24l) . we obtain at random Bob's selection of b and one 
ofthesj.'''. 

We leave B in its after-measurement state, thus fixing the value of b, and 
iterate the "right part" of the algorithm (preparation of registers A and V, 
computation of / (b, a), and measurement of A) until obtaining ri — 1 different 

(b) 

We check that the quantum algorithm requires the number of function eval- 
uations of a classical algorithm that knows in advance 50% of X. Any s^- ' is a 
solution of the problem addressed by the quantum part of Simon's algorithm. 
The advanced information is any 50% of the information about the solution 
contained in b. For reasons of symmetry, this is any 50% of the table of the 
function that does not contain the same value of the function twice. In fact, 
the half tables that contain a same value twice already specify the value of h^''^ 
and thus the value of any s- . For the half tables that do not contain the 
same value of the function twice, the solution is always identified by computing 
/ (b, a) for only one value of a (any one) outside the half table. The new value 
of the function is necessarily a value already present in the half table, which 
identifies h^**) and thus all the s^- ' . Thus, both the quantum algorithm and the 
advanced information classical algorithm require just one function evaluation. 

As in section 3.1, the above defined advanced information is back evolved 
projection on the solution and cannot exceed 50% of I. 

Now we go to the history superposition picture. For example, let us assume 
that the advanced information is / (b, 00) = and / (b, 11) = 1, namely the first 
and last row of either /ooii (a) or /oioi (a) - see table (1^^ . To find which is the 
case, Alice should perform function evaluation for either a = 01 or a = 10. We 
assume she does it for a — 01. If the result of the computation is 0, this means 
that b = 0011. This originates two classical computation histories in quantum 
notation: # 1: initial state poe"^" lOOll)^ |01)^|0)y, state after the computa- 
tion po e'vo 10011)5 |01)^ |0)^; # 2: initial state po e*"^" |0011)5 |01)^ |1)^, state 
after the computation po e"''" |0011)5 |01)^ |l)y- If the result of the computation 
is 1, this means that b = 0101. This originates two histories: # 3: initial state 
P2e*'^2 10101)5 |01)^|0)^, state after the computation p2e*'^2 |0101)5 |01)^|l)y; 
# 3: initial state p2 e*'^= |0101)5 |01)^ \l)y, state after the computation p2 e*'^^ |0101)5 |01)^ |0)^. 
If she performs function evaluation for a = 10 instead, this originates other 4 
histories, etc. If we sum together all the different histories, each with a suitable 
phase, and normalize, we obtain the function evaluation stage of the quantum 
algorithm. 

To obtain the quantum algorithm, we should choose history phases and the 
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final unitary transformation applied to register A in such a way that the infor- 
mation about the solution readable in that register at the end of the algorithm 
is maximized. 

The 50% rule also applies to the generalized Simon's problem and to the 
hidden subgroup problem. In fact the corresponding algorithms are essentially 
the same as the algorithm that solves Simon's problem. In the hidden subgroup 
problem, the set of functions fb : G —?' W map a group G to some finite set 
W with the property that there exists some subgroup S < G such that for any 
a, c e G, /b (a) = /b (c) if and only if a-|- 5 = c + 5. The problem is to find the 
hidden subgroup S by computing /b (a) for various values of a. Now, a large 
variety of problems solvable with a quantum speed-up can be re-formulated 
in terms of the hidden subgroup problem [9]. Among these we find: Deutsch's 
problem, finding orders, finding the period of a function (thus the problem solved 
by the quantum part of Shor's factorization algorithm), discrete logarithms in 
any group, hidden linear functions, self shift equivalent polynomials, Abelian 
stabilizer problem, graph automorphism problem. 

4 Applying the 50% rule to the search of quan- 
tum speed ups 

In hindsight, the quantum algorithms examined are skillfully designed around 
the 50% rule. In unstructured data base search, the advanced knowledge of 50% 
of the solution yields a quadratic speed-up, given that the number of function 
evaluations goes from O (2") to O (2"/^). Thus, the possibility of a quadratic 
speed-up is established by the 50% rule, one does not need to know Grover's 
algorithm. Similarly, in the structured algorithms that yield an exponential 
speed-up, the problem is chosen in such a way that, if one knows in advance 
50% of the rows of the table of the function, computing /b (a) for a single 
value of a outside the half table yields the solution. Thus, the possibility of an 
exponential speed-up is established by the 50% rule before knowing the quantum 
algorithm. 

One way of searching for new quantum speed ups is thus looking for problems 
solvable with a single computation of /b (a) once that 50% of the rows of the 
table of the function are known. We provide an example - see also Ref. [4] . The 
set of functions is the 4! functions /b:{0,l} ^{0,1} such that the sequence 
of function values is a permutation of the values of the argument - see table 

(ESI). 



a 


/oooiiiio (a) 


/ooiioiio (a) 


/oooiioii (a) 




00 


00 


00 


00 




01 


01 


11 


01 




10 


11 


01 


10 




11 


10 


10 


11 





(25) 



The string b is both the suffix and the table of the function - the sequence 
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of function values for increasing values of the argument. We have chosen this 
set because, if we know 50% of the rows of one table, we can identify the 
corresponding value of b with a single computation of /b (a) . Without advanced 
information, three computations of /b (a) are required. Thus there is room for 
a speed-up. We build a quantum algorithm over this possibility. Register B is 
8 qubits, registers A is 2 qubits, and register F is 2 qubits, denoted Vq and Vi. 
The result of the computation of /b (a) = / (b, a) is bitwise modulo 2 added to 
the former content of V. The initial state is: 



^ (e*'^« 100011110)^ + c"^^ 100110110)^ + c"^^ |00011011>^ . 



8^6 

(|00)^ + |01>^ + |10)^ + |11)^) (|0)^„ - |1)^J (|0)^^ - |1)^J . 

Computing /(b,a), then performing the Hadamard transform on register A, 
yields 

^ [(e*'^« 100011110)^ + ...)|01)^+(c''^M00110110)5+ ...) |10)^ + (e^^MOOOllOll)^ + ...) |11), 

(|o>v„-|iVo)(lo>v,-|i>vJ, 

an entangled state where three orthogonal states of B (each a superposition 
of 8 values of b, corresponding to a partition of the set of 24 functions) are 
correlated with, respectively, |01)^ , |10)^, and |11)^. Measuring A in the 
above state tells which of the three partitions the function belongs to. In the case 
of a classical algorithm, identifying the partition requires three computations of 
/ (b,a), as readily checked. There is thus a quantum speed-up. 

With the 50% rule, one can figure out any number of these speed ups in 
terms of number of function evaluations. Thus, this rule provides a playground 
for studying the engineering of quantum algorithms. 

5 Conclusion 

Summarizing, moving from classical to quantum problem solving, the classical 
problem-solution correlation becomes quantum. There is quantum correlation 
between the selection of an eigenvalue of B on the part of Bob and that of an 
eigenvalue oi A - the solution - on the part of Alice. The random selection 
of an eigenvalue of B is required to set register B in a known eigenstate, then 
transformed into the desired eigenstate by means of a permutation of the basis 
vectors of B. From the standpoint of correlation, which is defined on repetitions 
of the same quantum experiment, this permutation should be considered fixed: 
the fact that Bob can change it to always obtain the desired value of b belongs 
to a different film. Because of quantum correlation, all is like Alice contributed 
to selecting 50% of the information that specifies the problem. As the solution 
is a function of the problem, this becomes Alice knowing in advance 50% of the 
information that specifics the solution. 
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The fact that the quantum speed up comes from comparing two classical 
algorithms, with and without advanced information, has a practical interest. It 
allows to characterize the problems solvable with a quantum speed up in an 
entirely computer science framework, with no physics involved - an important 
simplification. It should also allow to identify new quantum speed ups, as 
exemplified in section 4. 

The fact that quantum algorithms are quicker because they know in advance 
50% of the solution they will themselves produce in the future has an obvious 
interest from the standpoint of the philosophy of quantum mechanics. 

Future work should aim to check the 50% rule for all quantum algorithms 
found so far, to possibly demonstrate it in a more general way, for example for 
the generic quantum computational network or quantum Turing machine, and 
to explore the quantum speed ups achievable on the basis of the 50% rule. 
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